We call these public clients and its the way our admin console works.
Use our javascript adapter to obtain a token and make XHR requests to
the server with the token.
On 11/13/2015 10:29 PM, David Hay wrote:
Hi,
Newbie here...
We're needing to secure an AngularJS application hitting our REST API
(and supporting customers hitting it directly).
I believe in this situation we need to utilize the Hybrid flow as there
is no way to secure the secret in AngularJS.
Does Keycloak support this?
Thanks!
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com